OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: (Fwd) How does postfix resolve domain names?

From: mouss (usebsdfree.fr)
Date: Thu Nov 02 2006 - 16:26:14 CST


Eugene Geldenhuys wrote:
> Hi
>
> I am new to the list and have tried to find the answer to my question
> in the archives and
> elsewhere on the web.
>
> I am interested in the mechanism postfix uses to resolve names, the
> reason I ask is because
> after implementing
>
> smtpd_client_restrictions = reject_unknown_client
>
> in main.cf, I am seeing messages like this in the log:
>
> scylla postfix/smtpd[11408]: NOQUEUE: reject: RCPT from
> unknown[203.161.126.147]: 450
> Client host rejected: cannot find your hostname, [203.161.126.147];
> from=<someonesomewhere> to=<someonemydomain> proto=ESMTP
> helo=<tara2.wa.amnet.net.au>
>
> I left the hostname and address intact, if you resolve the address,
> you get:
>
> Non-authoritative answer:
> 147.126.161.203.in-addr.arpa name = tara2.wa.amnet.net.au.
>
> which exactly matches the hostname.
>

$ host 203.161.126.147
147.126.161.203.in-addr.arpa domain name pointer tara2.wa.amnet.net.au.
$ host tara2.wa.amnet.net.au.
tara2.wa.amnet.net.au has address 203.161.126.21

21 != 147.

so the owner of *.147 _claims_ it is tara2.*, but the owner of tara2.*
doesn't confirm this. The claim is thus of no value and the IP is unknown.